observepoint/ObservePoint-Start-Audit
A GitHub Action that automatically triggers ObservePoint audits in CI/CD pipelines with secure callback handling.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit May 14, 2026
- License
- MIT
Pinned Snippet
uses: observepoint/github-actions-integration@b4306d3e0b3e09c9de7c026f7ac0fc8edea58294 # v1.1.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| pr_number | Pull‑Request number (omit on push). | no | "" |
| audit_id | Audit ID to start. | yes | — |
| starting_urls | Comma‑separated or newline-delimited list of starting URLs passed to startingUrls. | no | — |
| observepoint_api_key | API key for ObservePoint. | yes | — |
| callback_owner | GitHub owner / organisation for the callback repository. | yes | — |
| callback_repo | Repository that contains the workflow to consume the callback. | yes | — |
| callback_event_type | Event type name (e.g. observepoint-audit-complete) that will be triggered by repository_dispatch. | yes | — |
| callback_ref | Git ref (branch) to run the downstream workflow on. | yes | — |
| callback_context_json | Optional JSON object (stringified) that will be *merged* into callbackContext. Example: '{"env":"staging","prNumber":"ABC-123"}' | no | {} |
| commit_sha | Commit SHA to set status against (optional in v3; still forwarded for traceability). | no | "" |
| max_pages | Optional maximum number of pages to scan (overrides audit configuration). | no | — |
Outputs
no outputs